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MEMCPANDUM FOR : Wathan C. Fitts, Chairman, Intelligence 
Information Handling Committee (TEC) 


FROM ae : dohn F. Blake. 
Acting Ceputy Director 


SUSTJECT : Draft DCI Report to the Eenate Select Committee on. 
Intelligence on Community Information Uandling 


REFERENCE |. t THC/MM 78-03, 31 January 1973, same subject 


1. ‘There has been insufficient tise to perform an in-depth review 

= a report with such far-reaching implications. It is our view that 
rganizational and procedural procosals of this ragnitude which have 

oe been develoved in collaboration with the members of the Intelligence 
Cermunity should not be forwarded to a Congressional Committee until We 
they have been thoroughly coordinated with and areed to by Community > 
irenbers. More time is needed to hear the views of the HEIB member agencies ace 
on the actions nreposed. Very little of what is set forth in the paper | * 
has been surfaced before. , . \ 


2. We feel that in most respects the revert contains a compre- 
hensive and balanced presentation of Community information handling 
problems, the kinés of systens and data bases being develoved and 
maintained, the undeniable deficiencles in collaborative planning 
and operation of systems, and the means by which sore existing ills 
might be eliminated, coupled with due warnings about the necessity to’ 
weigh the cost-henefits of such approaches and their attendant risks. 
In principle, its recommendations for new manageicent arcroechas seesn 
fundarentally sound as well as its croposed missions ani functions for 
the organizations raking up the new structure. Some cagree of central ized 
review of the total ALP cortion of the NFIP offers the possibility of 
identifying and rossibly eliminating pg oroamae efforts. A Cosmenity 
Information Systens Office (CIZC) makes sense. The paner argues ter 
a Glan wolch identifies neecs, pe assets, and relates neexis to 
agsets. we agree with this accroach. we are not, however, optimistic 
that the develoorent of a CIT will be easily accomplished. Yor are — 
wa certain that anything other than e loosely knit system is nested. 
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3. We are concerned that the report tells the Senate Select 
Cormittee on Intellicence(SSCI) more than is necessary about the various 
facets of Community information handling problems, tells Its stcry in 
too inany pages and with undue revetition, and commits the DCI and the 
CISO (not to mention the NFI8 agencies themselves) to an excessively 
ambitious and Getailed set of goals, organizaticnal relationsalps and 
controls which may subject us to restraints we wlll subsequently 
regret. We believe the paper would be more effective if it were 
tightened up by removing many of its beauedancl es and by reducing 
the number of annexes. 


Cad 


4, We feel it is inavpropriate to send an organizational charter 
(Annex D) to Congress before it has been slgned by the DCI. In 
addition, Cormumnity members should fully understand and accept the 
new CIsO rescongsibilities and activities before that organization's 
_charter is’ forwarded to the PCI for signature. 


5. ‘The covering report and the annexes are inconsistent In 

some respects. In particular, it is unclear whether the CISO 

is a staff or a Line organization. In Annex C it is more clearly a 
staff organization per forming logical staff functions such as 

monitoring, reviewing, ccordinating, advising, guiding, etc.; while yy 
in the covering report and in Annex FE, the CIfO is depicted as performing 
line functions such as designing, planning, developing alternatives, 

etc. The line functions reflected in the report and in Annex fB aa 
would require an unnecessary Guplication of technical staffs of the 
Community members. “ 


6. We have two additional general criticisms. First, a 
frequent reference is mada to the “Commmity Information Handling 
System" (CINS). To the reader there is some suggesticn in this that 
it is one totally integrated system. we do not believe this is the | Ss 
intent, but the implication is dangerous because it geens to promise oN 
something that will never be realizeé. Second, the theme of centralized \ 
and coordinated planning and decentralized operation should be qualified. 7% 
Planning is an activity that must take place at all levels. we do not 
helleve it is intended that plannina should he conducted only by the 
CISO. > 


7. ‘hile our principal concerns relate to the covering report end 
to Annexes D and —, we feel that Annexes A, B, and C, with certain changes, 
end Anygex F could be forwarded to the Senate as sufficient response to 
their ‘directive with a brief coverlng hEMO stating easentlally the 
folldwings Pts 
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"ve know wa have problems and have forred an organiza- 
tion to coordinate and wonitor ADP activities in a 
Community context, The situation is described in Annexes 
A and 8, and the charter for the new organization is in 
Annex C. Letalls of Agency ADP files and system descr lp- 
tions are contained in Annex F. We are currently 
developing procedures for planning and coordinating 

APP activities in the Intelligence Community. Gur 

goals for the first year are: 


a. To establish CISO as a central planning 
organization in February 1978 as a part of 
the DCI's Resource Managewent Staff. 


b. To review annual NFIP resource reguests and 
‘ identify ADP issues needing PCI resclution, 


Cc. To begin a formal and continuous dialogue with 
Abr-T offices in the Intelligence Comunity as 
well as prograin manegers to keap abreast of i 
operating systems, systems under development, 
and new ADP initiatives. i oes 


: \ 
da. To restond to Congressional needs for APP-T {- 
information as. required. ‘To begin identifying ak 
and examining sajor FY 1979-84 issues as previously f 
Sal oat ad , : hes ee 
requested by SE&CrI. - 1. a8 


@. Yo undertake selected studies and technical evalua- ra 
tions in oroblem areas in suprort of resource hanage= WS 
rent decision making, OR 

7 t 
ed 
£. To undertake actions to evaluate the feaslbility a7 co 
of a ‘Community Information Handling System. ' Be ON 


Ve will report to you next year on-.our progress." 


€. We think the SSCI would be satisfled that such a planning 
and coordinating body had been established and vould accept 8 
the need to give that organization time to staff up and determine \ 
what the limitations on its assets and rrograms might be. 


9. ith respect to Annex F, we have already nrovided you a 
new sneet on CLA's ADP costs, using uncate<] figures fron the 
Congressional fudget, and a Ceecription of CIA's improver brocedures 


| 


 * 


os 
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for cantral ADP overview (copies attached), These should be included 


within CIA's portion of Annex fr. 


2. Gur more srecifle cormenta on the report, including the 
changes which are necessary for annexes A-C, are attached. 


Johan FP, Rlake 


Attachments 3 
Comments on Specific Tointa 
CIA Autcaatic Nate Processing Costs Past and Projected 
Inproved Central Cvervies of Automatic bata Processing in CIA 


Distribution: 
Orig ~ Adse watt 
YL = AOLCT watt 
l= ER w/att 
1 - Pach directorate ADP contro) officer w/att 
1 = Compt w/att 
Ll - A/C/P w/att 
1 =~ Compt Fesding w/art 
- Commt Subj w/att 
OG Chrone w/ytt 
c/CompesOC{ hs (7 Feb 78) 
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Comment on Specific Points 


Executive Summary 
oO Para. 1.6—he ‘wisdom of preserving the operation of informa— 
| tion handling systems and maintenance of data bases on 
a decentralized basis, with the CISO undertaking centralized 
planning and recommending funding levels, is sound. As noted 
above, however, the planning function must be shared and 
we assume that the principal initiative for planning new 
systems will continue to rest with the line organizations - 
who, by virtue of their close contact with the user, will 
best understand the deficiencies of extant systems and 
the need for change. Perhaps this point could be clarified. 


Oo Para. 1.8—Given the schedules imposed by the budget formula— 
tion process, it seems unrealistic to propose that the CIsoQ 
organization, yet unborn, can get underway quickly enough 
to influence the Fy-80 budget plan. Indeed, the CIHS Start- 

__Up Schedule (Fig. 4.1) at the end of the report seems to 
Suggest otherwise. ; 


Report 


© Para. 1.7—Per your instructions, CIA included only those 
administrative files which could be of possible interest 
to the Intelligence Community. Our personnel, payroll, 
and financial files, in particular, were excluded from 
our submission. 


© Para. 1.12—This discussion of shared data bases seems 
to suggest that only automated files accessible through 
remote on-line terminals are shared. Actually there. 
are many additional files shared through telephonic 
or other means. CIA/OCR, for example, has long provided 
; NSA with most. of its biographic reference Support 
eee A, _ through the grey phone system. 
Similarly, the AEGIS subject index to Community 
intelligence reporting is used by many other agencies 
than CIA, even though only a subset of the file is 
available for interrogation on-line by other NFIB members, 


O Para. 2.2--The undue emphasis often placed on automation 
vs. manual processes is wisely avoided here and elsewhere 
in the report and annexes. As indicated, there must be 
a careful evaluation of the trade-offs on a case-by-case 
basis. 
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PPro “fen 5: 3-—The qean ine of the fourth sentence in this 


Saas beginning with the words "This syste (CIHS) 

must possess..." is obscure. In addition, it is said here 
that a CIHS must be developed whereas paragraph 1.8 of . 

the Executive Summary recommends that the CISO should 
"undertake actions to evaluate the feasibility" (underlining 

added ) of. a CIHS. ‘This contradiction should be eliminated. 


O Para. 3.7—An excellent point is made here about the 
need to approach data base sharing cautiously, with due 
regard for cost/benefit considerations, and the possible 
alternatives (e.g., mail systems) to remote querying via 
teleconmunication networks. 

re) Para. 3.8—Another commendable cautionary note is 
expressed about the expense of changing systems in 
behalf of other users and the assurances needed 
that the additional resources will be forthcoming 
before such commitments are undertaken. 


© Para. 3.14—The discussion qnended here of problems 
and possible cost implications of data element stan- 
dardization is well done and properly stressed. Among 
other things, reference is made to the possibility of 
using the computer to translate from one indexing 
Standard to another. Again, this is a problem often 
subjected to oversimplified "solutions." 


Oo Para. 3.17-—-While the issue-of whether to automate 
an activity should certainly undergo rigorous analysis 
by, among others, the CISO, let no one underestimate 
the difficulty of this process or suggest that mere 
improved "managerial techniques” can readily overcome 
the associated problems. 


oO Para. 3. 21—~The implication of this paragraph appears 
to be that all ADP proposals will be reviewed by the 
CISO. If so, we submit that this organization would © 
need a staff far in excess of the "High Intensity” 
level of the 15 proposed for its Information System 
Analysis Division. Presumably, such reviews will 
have to be limited to systems exceed ing a certain 
anticipated funding level. 


o- Para. 3.23-——-Some reference should be made in this 
section of the report to the on-going CIA Executive 
Advisory Group's review of ADP systems. ‘The paragraph 
should not suggest that top management has given no 
attention to the costs of ADP systems and resource - 
competition in this area. 
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principles to guide Community information Dancereds 
which we nee SURROE Es 


Annex A 
ry . 


'.O Para. 1.2—We would suggest an addition to the last 
sentence of this paragraph stressing that some of the 
listed systems are not as yet operational. Until one 
examines the follow-on tables in some detail, this fact 
does not become apparent. We are also at a loss to 

_ understand why some of the largest.and most significant 

' production support systems are not included in the 
tables, e.g., the 3.1 million record AEGIS file and 
IEC; while much less important systems are. 


oO table A-l—For the ian entry starting with CIA/SAFE: 
change ]) "CIA/SAFE” to "SAFE"; 
~ change 2) "CIA/Support" to "Support"; 
change 3) "CIA" to "DIA/CIA". 


0 ‘able A-1—Delete the line sieve starting with DIA/SAEE, 


om mab 2-—The average age of Model 360/67 is listed as 1.2 years, 
The CIA 360/67 was installed in 1969. Recommend. the 
pRNEEAS age figure be. ver ified. 


Annex B 


© General--This annex reviews some very practical aspects 
of the entire information handling issue. The tables 
on pages B-6-8 are useful as well. Much of Annex B, 
however, is either redundant or adds little to the 
report. Listing the COINS files, for example, does 
not. convey much to the reader because the files are 
not described. 


o Para. 1.1—Reference should be made to other ways of 
sharing files than by electronic means. 


© Para. 1.4—This important paragraph might have gone on . 

~ to point out that because of the unique characteristics 
of the different Community data bases, it is virtually 
impossible to design a single information handling 
_ system, including software and hardware, which will 
suit more than a few application areas. This applies 
to the SAFE/ADISS system as. well as to projects of 
lesser magnitude. 


3 
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about providing the necessary resources to an 
organization charged with fulfilling some Community 
information handling responsibility, one might add 
that users of such a system also need the assurance 
that if they cease and desist’ storing the same data. 
themselves, the activity will be continued more or 
less indefinitely. 


© Table B-2—Information Services Staff is incorrectly 
identified 


O Para., 2.1]—Dissemination controls are indiscriminately 
mixed with security classifications in a sentence near 
the end of this paragraph. Beginning with the words. 

- "SI Compartment," what follows should be described 
as some Of the dissemination controls used in addition 
to security classifications. 


oO Para. 3.5—We object to the use of the word "today" 
at the beginning of the 4th sentence. ‘The information 
handling role of central reference services, at least 
in the CIA, has never been limited to the activities 
of the traditional library. |. . 


| Annex C 


© General—This discussion of the CISO would be more 
useful if the CISO staffing estimate compared the 
current number of IHC staffers handling coordination 
efforts with at least the short-term personnel totals 

. Planned for the CISO. This could help in evaluation of 

‘the work cut out for the CISO in the first six months 
against what appears to be an underestimate of the 
manpower required to do the job. ‘There is no 
identification in Annex C of the means by which 
the CISO manpower requirements have been estimated. 


Oo Para. 1.4: Fifth line ~ change "carry out" to 
"coordinate". 


© Para. 1.4: Ninth line — change "develop and use" to 
"establish requirements for, monitor the development 
of, and use", 


Oo Page C~2: Footnote - delete ", as defined in Annex a”. 
o Figure C-2: Para. 2 under FUNCTIONS - change "To design 


and establish" to "To establish the requirements for 
and monitor the development of". 
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o Figure C-4: It is not clear what the Contractor Support 
functions of the Community Planning Division are. It 
is believed they should be: 
Coordinate planning for Contractor Support. 
Coordinate contract monitoring and administration. 


o Figure C-8: Para 3 under FUNCTIONS - Change "develop" 
- to "coordinate". 


.O. Figure C-9: The CISO ineiudes ‘a escury and Privacy 
Standards Branch, which presumably would function as 
a focal point for Community computer secur ity policy 
and standards. The DCI Security Committee currently 
has a subcommittee devoted to the development of 
computer security policy. While it might be profitable 
to transfer this function to the proposed CISO, a 
move in this direction should not be pursued 
summarily, without detailed Community coordination. 
Such review might suggest the need for a computer 
security focal point in the CISO in addition to the 
functions of the DCI Security Committee in this 
area. However, if Annex C is sent to Congress, we 
‘urge that all reference to a computer security 
function in the CISO be deleted along with the 
identification of the bara § and Privacy Standards 
Branch. ; 


Annex. D 
We strongly recommend this Annex be eliminated from 
the report. In terms of authority to act, the new 


-Executive Order provides such authority until a 
DCID can be coordinated within the NFIB community. 


Annex E 
This annex is redundant and too detailed. Paragraph 


3.6 stresses user needs, an excellent point, but it 
could be removed and placed elsewhere. 
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IMPROVED CENTRAL OVERVIEW -OF AUTOMATIC DATA PROCESSING IN CIA 


(Addendum to CIA submission for the 
‘Intelligence Community ADP Inventory ~ ; et 
for presentation to the Senate Select ye oe 

". .  ,*, Committee on Intelligence, dated  . nice 


Re os . . : toe ; . . ‘ . 
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(FQUO) While ADP initiative is decentralized within CIA, so that ADP may 
best he directed toward local needs and weighed carefully against alternative ~ 
methods to accomplish a component's assigned tasks, Agency management. - mo, 
has taken significant.steps this past year to improve central overview a 
Of ADP expenditures. = ae ee eS Pgs MR 
en (FOUO) In a memorandum to the Executive Advisory Group {EAG) in fee uringy panes 
* .. 1976, the DDCE asked the Comptroller and the Director of Data Processing ea 
" .°, . to make joint recommendations with respect to two issues: oe ede ae 


- i. "What can be done to improve top management's ability 
to plan for future ADP resource requirements so that we may 
assure ourselves that the large ADP budget increases we are faa 
experiencing are in the overall interests of the Agency? a . 
How can the key ADP investment issues we Face be brought 
forward for top management review so that we may establish 


guidance for: the budget planning process?” » 


2. "How can we monitor current month-by-month use of 
the central services provided by the Office of pata Processing | 
(ODP) in such a way as to ensure visibility to top management - : et 
of the many demands being levied on Opp by Agency components . 
and permit Agency-level decisions to be made on priorities. 
‘when contentions for limited ODP resources arise?" 


(FOUO) A ‘joint paper ‘was written by the Comptroller and the Director 
of Data Processing on the two issues. ‘The BAC agreed in April 1977 to 
the actions they recommended, which were these: } , 


1. ‘he EAG will establish a deliberate ADP budget 
during the CIA program review, focusing broadly on the 
functional use of ADP and on major ADP investments— 
the key computer projects of Agency components that 
will spend over $250,000 on ADP during the program — 

_ year, ODP-supported projects which are expected to cost 
over $250,000, CDP expansion plans, and imoortant 
new projects identified by components, 
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2. During the operating year, the EAG will 
perform a thorough, systematic review of the cost 
effectiveness of all major projects which are currently 
supported by ODP" s: central services. . a 


( FOUO) ‘The Comptroller and the Director of Data Pr ocessing depalcos’’ 
procedures to carry out the ae recommendations. The ele events . 
have since taken place: os ph - 


ee er a ans! Poe An Agency ADP Gee was nee by the: Comptroller”: 
pan oy es s aa included (for the first time) within the proposed 1979 3 
Me Agency Program Plan. In June 1977, the EAG addressed the 
issues sosouteacs therein and agreed upon ADP Fonding levels. 


oe -26 in Resear 1977, the EAG began reviewing individually 
- the 21 major projects supported by ODP on behalf of Agency oa 
components, to evaluate these uses of ODP’s resources within 
. its 1978 funding level.- The EAG was provided a Project Decision 
’. Form for each project, containing a project description and ee 
statements of its objectives and bencette =e ves agate ° 
= estimated resource PeCUACONEMES ; : 


(FOU0) Both of ce FAG actions have resulted in cineeeagen: ential ; 
. O£ ADP growth by top management. ‘They have caused managers at every : 
_" level to plan their use of ADP with improved focus on cost effectiveness, 
' The effort represents high-level manager ial attention to computer use’ 
which 45; to our pee pnsdee in Government. : : 


c 


_ 
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